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(Once Amended) 



A method for identifying a corresponding session for 



5 
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a packet, comprising: 

(a) receiving at least a first packet communicated between first and second endpoints 
to a first session, the first packet comprising at least one of an electronic address of the first 
endpoint, a session id of the first endpoint, and a session id of the second endpoint; 

(b) comparing the at least one of an electronic address of the first endpoint, a session 
id of the first endpoint, and a session id of the second endpoint in the packet with a listing 
of at least one of electronic addresses and session ids contained in previously received 
packets; and 

(c) when the at least one of an electronic address of the first endpoint, a session id of 
the first endpoint, and a session id of the second endpoint in the packet matches an entry in 
the listing, determining an electronic address of the second endpoint in the first session. 

2. (Once Amended) The method of Claim 1, wherein the packet is 
transmitted from the first endpoint to a session monitor and further comprising before the 
comparing step (b): 

(d) parsing the packet for at least one selected field; and 

(e) determining whether the electronic address of the second endpoint is in the 
selected field, wherein, when the electronic address of the second endpoint is in the selected 
field, steps (b) and (c) are not performed and, when the electronic address of the second 
endpoint is not in the selected field, steps (b) and (c) are performed. 
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3. (Once Amended) The method of Claim 1, wherein the comparing step 
(b) comprises the substeps of: 

(d) comparing the at least one of an electronic address of the first endpoint, a session 
id of the first endpoint, and a session id of the second endpoint in the packet with a first 

5 listing of at least one of electronic addresses and session ids contained in previously received 
packets, the first listing corresponding to a list of active sessions for which the electronic 
addresses of each session participant are known; and 

(e) comparing the at least one of an electronic address of the first endpoint, a session 
id of the first endpoint, and a session id of the second endpoint in the packet with a second 

1 0 listing of at least one of electronic addresses and session ids contained in previously received 
packets, the second listing corresponding to a list of active sessions for which the electronic 
address of at least one participant in a session is not known. 

4. (Once Amended) The method of Claim 3, wherein in step (d), when the 
at least one of an electronic address of the first endpoint, a session id of the first endpoint, 
and a session id of the second endpoint in the packet is in the first listing, step (e) is not 
performed and the first listing is updated to reflect data in the packet. 

5. (Once Amended) The method of Claim 3, wherein in steps (d) and (e), 
when the at least one of an electronic address of the first endpoint, a session id of the first 
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endpoint, and a session id of the second endpoint in the packet is not in the first listing and 

is in the second listing, the second listing is updated to reflect data in the packet. 

6. (Once Amended) The method of Claim 3, wherein, in steps (d) and (e), 
when the at least one of an electronic address of the first endpoint, a session id of the first 
endpoint, and a session id of the second endpoint in the packet is not in the first and second 
listings, the at least one of an electronic address of the first endpoint, a session id of the first 
endpoint, and a session id of the second endpoint in the packet is added to the second listing. 

7. (Once Amended) The method of Claim 3, further comprising after steps 
(d) and (e) comparing entries in the second listing to determine whether at least two entries 
have a same at least one session id and electronic address. 

8. (Once Amended) The method of Claim 7, wherein, when at least two 
entries have a same at least one session ids and electronic addresses, removing the entries 
from the second listing and adding selected information in the at least two entries to the first 
listing. 



10. (Once Amended) A system for identifying a corresponding session for 
a packet, comprising: 
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(a) an input configured to receive at least a first packet communicated between first 

and second endpoints to a first session, the first packet comprising at least one of an 
5 electronic address of the first endpoint, a session id of the first endpoint, and a session id of 

the second endpoint; and 

(b) a matcher configured (i) to compare the at least one of an electronic address of the 
first endpoint, a session id of the first endpoint, and a session id of the second endpoint in 
the packet with a listing of at least one of electronic addresses and session ids contained in 

1 0 previously received packets and (ii) to determine a electronic address of the second endpoint 
in the first session, when the at least one of an electronic address of the first endpoint, a 
session id of the first endpoint, and a session id of the second endpoint in the packet matches 
an entry in the listing. 

11. (Once Amended) The system of Claim 10, wherein the packet is 
transmitted from the first endpoint to a session monitor and further comprising: 

(c) a parser configured to parse the packet for at least one selected field; and 
wherein the matcher is further configured (iii) to determine whether the electronic 

5 address of the second endpoint is in the selected field. 

12. (Once Amended) The systemof Claim 10, wherein the matcher is further 
configured (iii) to compare the at least one of an electronic address of the first endpoint, a 
session id of the first endpoint, and a session id of the second endpoint in the packet with a 
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first listing of at least one of electronic addresses and session ids contained in previously 

5 received packets, the first listing corresponding to a list of active sessions for which the 

electronic addresses of each session participant are known and (iv) to compare the at least 

one of an electronic address of the first endpoint, a session id of the first endpoint, and a 

session id of the second endpoint in the packet with a second listing of at least one of 

electronic addresses and session ids contained in previously received packets, the second 

10 listing corresponding to a list of active sessions for which the electronic address of at least 

one participant in a session is not known. 

1 3 . (Once Amended) The system of Claim 12, wherein, when the at least one 
of an electronic address of the first endpoint, a session id of the first endpoint, and a session 
id of the second endpoint in the packet is in the first listing, the matcher is further configured 
(v) to update the first listing to reflect data in the packet. 

14. (Once Amended) The system of Claim 12, wherein, when the at least one 
of an electronic address of the first endpoint, a session id of the first endpoint, and a session 
id of the second endpoint in the packet is not in the first listing and is in the second listing, 
the matcher is further configured (v) to update the second listing to reflect data in the packet. 

1 5 . (Once Amended) The system of Claim 12, wherein, when the at least one 
of an electronic address of the first endpoint, a session id of the first endpoint, and a session 



8 



Application No.: 10/028,874 

id of the second endpoint in the packet is not in the first and second listings, the matcher is 
further configured (v) to add the at least one of an electronic address of the first endpoint, a 
5 session id of the first endpoint, and a session id of the second endpoint in the packet to the 

second listing. 

1 6. (Once Amended) The system of Claim 1 2, wherein the matcher is further 
configured (v) to compare entries in the second listing to determine whether at least two 
entries have a same at least one session id and electronic address. 

17. (Once Amended) The system of Claim 16, wherein, when at least two 
entries have a same at least one session ids and electronic addresses, the matcher is 
configured (vi) to add the at least two entries to the first listing. 

18. (Once Amended) A method for monitoring a multi-party session, 
comprising: 

(a) receiving, at a first endpoint, at least a first packet communicated between the first 
endpoint and a second endpoint to a first session, the first packet comprising an electronic 

5 address of the first endpoint and an electronic address of the second endpoint; and 

(b) transmitting at least a second packet to a session monitor, the at least a second 
packet including the respective first and second electronic addresses of the first and second 
endpoint s. 
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20. (Once Amended) The method of Claim 1 8 further comprising: 
(c) receiving the transmitted packet; 

(b) comparing at least one of the first and second electronic addresses with a listing 
of at least one of electronic addresses and session ids contained in previously received 

5 packets; and 

(c) when the at least one of the first and second electronic addresses is in the listing, 
updating the listing to reflect data in the packet and when the at least one of the first and 

-"7 second electronic addresses is not in the listing, adding the at least one of the first and second 

\ electronic addresses to the listing. 

2 1 . (Once Amended) An endpoint in a session, comprising: 

(a) an input operable to receive, at a first endpoint, at least a first packet 
communicated between the first endpoint and a second endpoint to a first session, the first 
packet comprising an electronic address of the first endpoint and an electronic address of the 

5 second endpoint; and 

(b) a transmitter operable to transmit at least a second packet to a session monitor, 
the at least a second packet including the respective first and second electronic addresses of 
the first and second endpoints. 

23. (Once Amended) The endpoint of Claim 21 further comprising: 
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(c) a second input operable to receive the transmitted second packet; and 
(b) a matcher operable (i) to compare at least one of the first and second electronic 
addresses with a listing of at least one of electronic addresses and session ids contained in 
5 previously received packets; (ii), when the at least one of the first and second electronic 

addresses is in the listing, to update the listing to reflect data in the packet and (iii), when the 
at least one of the first and second electronic addresses is not in the listing, to add the at least 
one of the first and second electronic addresses to the listing. 

24. (Once Amended) A session packet for transmission on a network, 
comprising: 

a source electronic address of a first participant to a session; 
a destination electronic address associated with a session monitor; 
5 an electronic address of a second participant to the session; and 

session information associated with the session. 



A 



27. (Once Amended) A method for monitoring a multi-party session, 
comprising: 

receiving a packet from a first endpoint in a first session, the first session being 
between the first endpoint and a second endpoint, the packet comprising a first electronic 



5 address of the first endpoint as the source, a second electronic address of the second 
endpoint, and an electronic address of a session monitor as the destination; and 
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inputting information in the packet in a first entry in an active session table, the first 

entry corresponding to the first session. 

28. (Once Amended) The method of Claim 27, wherein the inputting step 
comprises: 

comparing at least one of the first and second electronic addresses to the active 
session table to determine whether the first session has a corresponding first entry in the 
5 active session table; and 

when the active session table has no corresponding entry, creating the first entry in 
the active session table. 

29. (Once Amended) The method of Claim 27, wherein the packet is defined 
by the Real Time Control Protocol and the electronic address of the second endpoint is in the 
application field. 
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